build(deps): Bump sigs.k8s.io/cluster-api-provider-aws/v2 from 2.4.0 to 2.4.1 in /hack/third-party/capa (#468)

Bumps
[sigs.k8s.io/cluster-api-provider-aws/v2](https://github.com/kubernetes-sigs/cluster-api-provider-aws)
from 2.4.0 to 2.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/releases">sigs.k8s.io/cluster-api-provider-aws/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.1</h2>
<h1>Release notes for Cluster API Provider AWS (CAPA) v2.4.1</h1>
<p><a href="https://cluster-api-aws.sigs.k8s.io/">Documentation</a></p>
<h1>Changelog since v2.4.0</h1>
<h2>Changes by Kind</h2>
<h3>Support</h3>
<ul>
<li>Add <a href="https://github.com/damdo"><code>@​damdo</code></a> as a
reviewer (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4842">#4842</a>,
<a
href="https://github.com/richardcase"><code>@​richardcase</code></a>)</li>
</ul>
<h3>API Change</h3>
<ul>
<li>Add <code>additionalTags</code> API field to ROSAMachinePool (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4869">#4869</a>,
<a href="https://github.com/muraee"><code>@​muraee</code></a>)</li>
</ul>
<h3>Feature</h3>
<ul>
<li>Add <code>ProvisionShardID</code> API field to ROSAControlPlane (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4872">#4872</a>,
<a href="https://github.com/muraee"><code>@​muraee</code></a>)</li>
<li>Add additionalSecurityGroups field to ROSAMachinePool (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4848">#4848</a>,
<a href="https://github.com/muraee"><code>@​muraee</code></a>)</li>
<li>Add new field 'auditLogRoleARN' to ROSAControlPlane (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4857">#4857</a>,
<a href="https://github.com/muraee"><code>@​muraee</code></a>)</li>
<li>Add new fields to ROSAControlPlane - additionalTags, etcdEncryption,
endpointAccess (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4844">#4844</a>,
<a href="https://github.com/muraee"><code>@​muraee</code></a>)</li>
<li>Fix typo in awsmachinetemplate_webhook logs (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4789">#4789</a>,
<a href="https://github.com/guettli"><code>@​guettli</code></a>)</li>
<li>Ignition, from v3.1, now supports including Proxy or CA bundle data.
(<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4750">#4750</a>,
<a href="https://github.com/vincepri"><code>@​vincepri</code></a>)</li>
<li>Reconcile ROSAMachinePool fields (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4804">#4804</a>,
<a href="https://github.com/muraee"><code>@​muraee</code></a>)</li>
<li>Reconcile ROSAMachinePool.spec.ProviderIDList (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4831">#4831</a>,
<a href="https://github.com/muraee"><code>@​muraee</code></a>)</li>
</ul>
<h3>Bug or Regression</h3>
<ul>
<li>Fix discovered subnets for additional Load Balancers
(&quot;SecondaryControlPlaneLoadBalancer&quot;) when it is
internet-facing. (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4840">#4840</a>,
<a href="https://github.com/mtulio"><code>@​mtulio</code></a>)</li>
<li>Fix upgrade of managed node groups using custom AMIs (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4830">#4830</a>,
<a href="https://github.com/fad3t"><code>@​fad3t</code></a>)</li>
<li>Fix: bump rosa deps to fix int overflow on non-64bit arch (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4836">#4836</a>,
<a href="https://github.com/damdo"><code>@​damdo</code></a>)</li>
<li>Fixes in the health check probe configuration for API target group
on ELBv2. The correct health check path now is set to
<code>/readyz</code> when
<code>AWSLoadBalancerSpec.HealthCheckProtocol</code> is
<code>HTTP</code> or <code>HTTPS</code>. (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4846">#4846</a>,
<a href="https://github.com/mtulio"><code>@​mtulio</code></a>)</li>
<li>Skip location constraint configuration when creating a bucket on
<code>us-east-1</code>. (<a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4839">#4839</a>,
<a href="https://github.com/mtulio"><code>@​mtulio</code></a>)</li>
</ul>
<p>The images for this release are:
<strong>registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.4.1</strong></p>
<p>Thanks to all our contributors.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/cbf531711d117b823c587622ba0e64b94d0fd314"><code>cbf5317</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4846">#4846</a>
from mtulio/CORS-3289-lb-fix-api-hc</li>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/fc19825ae87f9ee7241412c5bb6ba260ee13589f"><code>fc19825</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4877">#4877</a>
from serngawy/domainPrefix</li>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/d04673e91b72e870ddd643b8779718cedd410a50"><code>d04673e</code></a>
Fix add back domainPrefix</li>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/068aba046a2cae6c7a6de6c295604d5cb863d5ce"><code>068aba0</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4872">#4872</a>
from muraee/rosa-controlplane-shardid</li>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/8910546435fcaf2232df95cae8aa0bb23aa32d3a"><code>8910546</code></a>
Add ProvisionShardID API field to ROSAControlPlane</li>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/d48958c4616dfed5e8073e1a7283b79ae119f168"><code>d48958c</code></a>
🐛 fix: unit tests for ELBv2 health check HTTP and HTTPS</li>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/c8dbbab946fedb70c6d2defa3533d15433b2793b"><code>c8dbbab</code></a>
🐛 fix: ELBv2 health check for Load Balancer API</li>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/73f4011761ed21d83cc8639c872c6638c4cd7fe5"><code>73f4011</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4869">#4869</a>
from muraee/rosa-machinepool-tags</li>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/0e0e4741d3572505342cd2e2acf461aa9ee6a6ea"><code>0e0e474</code></a>
add additionalTags API fied to ROSAMachinePool</li>
<li><a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/commit/b2bebfb80d58f488b8e54c957c1f5070bfc03dc2"><code>b2bebfb</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4863">#4863</a>
from serngawy/ndPeriod</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/cluster-api-provider-aws/compare/v2.4.0...v2.4.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigs.k8s.io/cluster-api-provider-aws/v2&package-manager=go_modules&previous-version=2.4.0&new-version=2.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

api/external/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awscluster_types.go

@@ -166,13 +166,19 @@ type Bastion struct {
 	AMI string `json:"ami,omitempty"`
 }
 
+// LoadBalancerType defines the type of load balancer to use.
 type LoadBalancerType string
 
 var (
-	LoadBalancerTypeClassic  = LoadBalancerType("classic")
-	LoadBalancerTypeELB      = LoadBalancerType("elb")
-	LoadBalancerTypeALB      = LoadBalancerType("alb")
-	LoadBalancerTypeNLB      = LoadBalancerType("nlb")
+	// LoadBalancerTypeClassic is the classic ELB type.
+	LoadBalancerTypeClassic = LoadBalancerType("classic")
+	// LoadBalancerTypeELB is the ELB type.
+	LoadBalancerTypeELB = LoadBalancerType("elb")
+	// LoadBalancerTypeALB is the ALB type.
+	LoadBalancerTypeALB = LoadBalancerType("alb")
+	// LoadBalancerTypeNLB is the NLB type.
+	LoadBalancerTypeNLB = LoadBalancerType("nlb")
+	// LoadBalancerTypeDisabled disables the load balancer.
 	LoadBalancerTypeDisabled = LoadBalancerType("disabled")
 )
 
@@ -268,6 +274,7 @@ type AWSClusterStatus struct {
 	Conditions     clusterv1.Conditions     `json:"conditions,omitempty"`
 }
 
+// S3Bucket defines a supporting S3 bucket for the cluster, currently can be optionally used for Ignition.
 type S3Bucket struct {
 	// ControlPlaneIAMInstanceProfile is a name of the IAMInstanceProfile, which will be allowed
 	// to read control-plane node bootstrap data from S3 Bucket.

api/external/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awsclustertemplate_types.go

@@ -54,6 +54,7 @@ func init() {
 	SchemeBuilder.Register(&AWSClusterTemplate{}, &AWSClusterTemplateList{})
 }
 
+// AWSClusterTemplateResource defines the desired state of AWSClusterTemplateResource.
 type AWSClusterTemplateResource struct {
 	// Standard object's metadata.
 	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

api/external/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awsmachine_types.go

@@ -210,6 +210,7 @@ type CloudInit struct {
 }
 
 // Ignition defines options related to the bootstrapping systems where Ignition is used.
+// For more information on Ignition configuration, see https://coreos.github.io/butane/specs/
 type Ignition struct {
 	// Version defines which version of Ignition will be used to generate bootstrap data.
 	//
@@ -237,6 +238,66 @@ type Ignition struct {
 	// +kubebuilder:default="ClusterObjectStore"
 	// +kubebuilder:validation:Enum:="ClusterObjectStore";"UnencryptedUserData"
 	StorageType IgnitionStorageTypeOption `json:"storageType,omitempty"`
+
+	// Proxy defines proxy settings for Ignition.
+	// Only valid for Ignition versions 3.1 and above.
+	// +optional
+	Proxy *IgnitionProxy `json:"proxy,omitempty"`
+
+	// TLS defines TLS settings for Ignition.
+	// Only valid for Ignition versions 3.1 and above.
+	// +optional
+	TLS *IgnitionTLS `json:"tls,omitempty"`
+}
+
+// IgnitionCASource defines the source of the certificate authority to use for Ignition.
+// +kubebuilder:validation:MaxLength:=65536
+type IgnitionCASource string
+
+// IgnitionTLS defines TLS settings for Ignition.
+type IgnitionTLS struct {
+	// CASources defines the list of certificate authorities to use for Ignition.
+	// The value is the certificate bundle (in PEM format). The bundle can contain multiple concatenated certificates.
+	// Supported schemes are http, https, tftp, s3, arn, gs, and `data` (RFC 2397) URL scheme.
+	//
+	// +optional
+	// +kubebuilder:validation:MaxItems=64
+	CASources []IgnitionCASource `json:"certificateAuthorities,omitempty"`
+}
+
+// IgnitionNoProxy defines the list of domains to not proxy for Ignition.
+// +kubebuilder:validation:MaxLength:=2048
+type IgnitionNoProxy string
+
+// IgnitionProxy defines proxy settings for Ignition.
+type IgnitionProxy struct {
+	// HTTPProxy is the HTTP proxy to use for Ignition.
+	// A single URL that specifies the proxy server to use for HTTP and HTTPS requests,
+	// unless overridden by the HTTPSProxy or NoProxy options.
+	// +optional
+	HTTPProxy *string `json:"httpProxy,omitempty"`
+
+	// HTTPSProxy is the HTTPS proxy to use for Ignition.
+	// A single URL that specifies the proxy server to use for HTTPS requests,
+	// unless overridden by the NoProxy option.
+	// +optional
+	HTTPSProxy *string `json:"httpsProxy,omitempty"`
+
+	// NoProxy is the list of domains to not proxy for Ignition.
+	// Specifies a list of strings to hosts that should be excluded from proxying.
+	//
+	// Each value is represented by:
+	// - An IP address prefix (1.2.3.4)
+	// - An IP address prefix in CIDR notation (1.2.3.4/8)
+	// - A domain name
+	//   - A domain name matches that name and all subdomains
+	//   - A domain name with a leading . matches subdomains only
+	// - A special DNS label (*), indicates that no proxying should be done
+	//
+	// An IP address prefix and domain name can also include a literal port number (1.2.3.4:80).
+	// +optional
+	// +kubebuilder:validation:MaxItems=64
+	NoProxy []IgnitionNoProxy `json:"noProxy,omitempty"`
 }
 
 // AWSMachineStatus defines the observed state of AWSMachine.

api/external/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/doc.go

@@ -17,5 +17,5 @@ limitations under the License.
 // +gencrdrefdocs:force
 // +groupName=infrastructure.cluster.x-k8s.io
 
-// package v1beta2 contains the v1beta2 API implementation.
+// Package v1beta2 contains the v1beta2 API implementation.
 package v1beta2

api/external/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/groupversion_info.go

@@ -14,7 +14,7 @@ See the License for the specific language governing permissions and
 limitations under the License.
 */
 
-// package v1beta2 contains API Schema definitions for the infrastructure v1beta2 API group
+// Package v1beta2 contains API Schema definitions for the infrastructure v1beta2 API group
 // +kubebuilder:object:generate=true
 // +groupName=infrastructure.cluster.x-k8s.io
 package v1beta2

api/external/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/network_types.go

@@ -27,6 +27,16 @@ const (
 	DefaultAPIServerPort = 6443
 	// DefaultAPIServerPortString defines the API server port as a string for convenience.
 	DefaultAPIServerPortString = "6443"
+	// DefaultAPIServerHealthCheckPath the API server health check path.
+	DefaultAPIServerHealthCheckPath = "/readyz"
+	// DefaultAPIServerHealthCheckIntervalSec the API server health check interval in seconds.
+	DefaultAPIServerHealthCheckIntervalSec = 10
+	// DefaultAPIServerHealthCheckTimeoutSec the API server health check timeout in seconds.
+	DefaultAPIServerHealthCheckTimeoutSec = 5
+	// DefaultAPIServerHealthThresholdCount the API server health check threshold count.
+	DefaultAPIServerHealthThresholdCount = 5
+	// DefaultAPIServerUnhealthThresholdCount the API server unhealthy check threshold count.
+	DefaultAPIServerUnhealthThresholdCount = 3
 )
 
 // NetworkStatus encapsulates AWS networking resources.
@@ -106,15 +116,19 @@ type TargetGroupHealthCheck struct {
 type TargetGroupAttribute string
 
 var (
+	// TargetGroupAttributeEnablePreserveClientIP defines the attribute key for enabling preserve client IP.
 	TargetGroupAttributeEnablePreserveClientIP = "preserve_client_ip.enabled"
 )
 
 // LoadBalancerAttribute defines a set of attributes for a V2 load balancer.
 type LoadBalancerAttribute string
 
 var (
-	LoadBalancerAttributeEnableLoadBalancingCrossZone           = "load_balancing.cross_zone.enabled"
-	LoadBalancerAttributeIdleTimeTimeoutSeconds                 = "idle_timeout.timeout_seconds"
+	// LoadBalancerAttributeEnableLoadBalancingCrossZone defines the attribute key for enabling load balancing cross zone.
+	LoadBalancerAttributeEnableLoadBalancingCrossZone = "load_balancing.cross_zone.enabled"
+	// LoadBalancerAttributeIdleTimeTimeoutSeconds defines the attribute key for idle timeout.
+	LoadBalancerAttributeIdleTimeTimeoutSeconds = "idle_timeout.timeout_seconds"
+	// LoadBalancerAttributeIdleTimeDefaultTimeoutSecondsInSeconds defines the default idle timeout in seconds.
 	LoadBalancerAttributeIdleTimeDefaultTimeoutSecondsInSeconds = "60"
 )
 

api/external/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/types.go

@@ -80,6 +80,7 @@ const (
 	ExternalResourceGCTasksAnnotation = "aws.cluster.x-k8s.io/external-resource-tasks-gc"
 )
 
+// GCTask defines a task to be executed by the garbage collector.
 type GCTask string
 
 var (
@@ -313,6 +314,7 @@ type InstanceMetadataOptions struct {
 	InstanceMetadataTags InstanceMetadataState `json:"instanceMetadataTags,omitempty"`
 }
 
+// SetDefaults sets the default values for the InstanceMetadataOptions.
 func (obj *InstanceMetadataOptions) SetDefaults() {
 	if obj.HTTPEndpoint == "" {
 		obj.HTTPEndpoint = InstanceMetadataEndpointStateEnabled

api/external/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/zz_generated.deepcopy.go

@@ -5,7 +5,7 @@ module github.com/d2iq-labs/cluster-api-runtime-extensions-nutanix/external/capa
 
 go 1.21
 
-require sigs.k8s.io/cluster-api-provider-aws/v2 v2.4.0
+require sigs.k8s.io/cluster-api-provider-aws/v2 v2.4.1
 
 require (
 	github.com/aws/aws-sdk-go v1.50.28 // indirect

hack/third-party/capa/go.mod

@@ -200,8 +200,8 @@ k8s.io/utils v0.0.0-20240102154912-e7106e64919e h1:eQ/4ljkx21sObifjzXwlPKpdGLrCf
 k8s.io/utils v0.0.0-20240102154912-e7106e64919e/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 sigs.k8s.io/cluster-api v1.6.2 h1:ruUi4q/9jXFuI+hmnDjo9izHgrBk4bjfQXLKx678PQE=
 sigs.k8s.io/cluster-api v1.6.2/go.mod h1:Anm4cA6R/AIP6KdIuVje8CdFc/TdGl+382bi5oPawRc=
-sigs.k8s.io/cluster-api-provider-aws/v2 v2.4.0 h1:m8mDWGDkTbOgia5br9Gklzf9X/6RfvmHDnW0f/cfQhc=
-sigs.k8s.io/cluster-api-provider-aws/v2 v2.4.0/go.mod h1:E/7VHYlm0fxDC5Rupfp5aR49+gIgdGCPOboR1g9rL+w=
+sigs.k8s.io/cluster-api-provider-aws/v2 v2.4.1 h1:IkQwllBlKe7MKNOTJK7QAXFeeTx3IZbK/dvp1FDM9xc=
+sigs.k8s.io/cluster-api-provider-aws/v2 v2.4.1/go.mod h1:FCax6cEAO5lwSZYDSuHJZjztKo+wn/B0mcQrQnbKqAo=
 sigs.k8s.io/controller-runtime v0.17.2 h1:FwHwD1CTUemg0pW2otk7/U5/i5m2ymzvOXdbeGOUvw0=
 sigs.k8s.io/controller-runtime v0.17.2/go.mod h1:+MngTvIQQQhfXtwfdGw/UOQ/aIaqsYywfCINOtwMO/s=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=